16956 matches found
CVE-2024-34515
image-optimizer before 1.7.3 allows PHAR deserialization, e.g., the phar:// protocol in arguments to fileexists...
ThinkPHP Cross-Site Scripting Vulnerability
ThinkPHP 8.0.3 allows remote attackers to exploit XSS due to inadequate filtering of function argument values in thinkexception.tpl...
CVE-2023-27283
IBM Aspera Orchestrator 4.0.1 could allow a remote attacker to enumerate usernames due to observable response discrepancies. IBM X-Force ID: 248545...
GHSA-7QWJ-GCJF-828F Zenario's Tree Explorer tool from Organizer affected by Cross-site Scripting
The Tree Explorer tool from Organizer in Zenario before 9.5.60602 is affected by XSS. This component was removed in 9.5.60602...
CVE-2024-34475
Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: gmmstateauthentication in amf/gmm-sm.c for != OGSERROR...
sagemaker-python-sdk Command Injection vulnerability
Impact The capturedependencies function in sagemaker.serve.saveretrive.version100.save.utils module before version 2.214.3 allows for potentially unsafe Operating System OS Command Injection if inappropriate command is passed as the “requirementspath” parameter. This consequently may allow an...
Trimble SketchUp Viewer 安全漏洞
Trimble SketchUp Viewer is a suite of 3D modeling programs for architects, urban planners, producers, game developers, and related professionals from Trimble USA. A security vulnerability exists in Trimble SketchUp Viewer that originates from a specific flaw in the parsing of SKP files, which...
Motorola GuideMe 安全漏洞
Motorola GuideMe is an application from Motorola USA. A security vulnerability exists in Motorola GuideMe, which stems from a hard-coded AES key vulnerability that could allow a local attacker to read arbitrary files...
CVE-2024-34403
An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string...
GHSA-4F92-W438-F484 CraftBeerPi 4 allows arbitrary code execution
URL GET parameter "logtime" utilized within the "downloadlog" function from "cbpi/httpendpoints/httpsystem.py" is subsequently passed to the "os.system" function in "cbpi/controller/systemcontroller.py" without prior validation allowing arbitrary code execution. This issue affects CraftBeerPi 4:...
HTTP Parameter Tampering
github.com/navidrome/navidrome is vulnerable to HTTP Parameter Tampering. The vulnerability is due to improper parameter validation within HTTP requests. An attacker can impersonate other users and perform unauthorized actions such as creating playlists, adding songs, posting comments, and changi...
BELL-CVE-2024-27072
Bulletin has no description...
BELL-CVE-2024-27074
Bulletin has no description...
BELL-CVE-2024-27054
Bulletin has no description...
BELL-CVE-2024-27057
Bulletin has no description...
BELL-CVE-2024-27063
Bulletin has no description...
BELL-CVE-2024-27046
Bulletin has no description...
BELL-CVE-2024-27043
Bulletin has no description...